We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9995317 commit 4bfa584Copy full SHA for 4bfa584
rules/cross-platform/initial_access_azure_o365_with_network_alert.toml
@@ -26,7 +26,7 @@ note = """## Triage and analysis
26
#### Possible investigation steps
27
28
- Investiguate all the alerts associated with the source.ip.
29
- - Verify all network security alert details associated with this source.ip.
+ - Verify the network security alert details associated with this source.ip.
30
- Verify all sign-in events associated with this source.ip.
31
- Consider the source IP address and geolocation for the involved user account.
32
- Consider the device used to sign in. Is it registered and compliant?
0 commit comments